marks4sure logo
You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 15 session hosts. All the sessions hosts have FSLogix installed.
You need to configure the path to where the user profiles are stored. The solution must minimize administrative effort.
Which registry setting should you use?
You have an Azure Virtual Desktop deployment.
You have a RemoteApp named App1.
You discover that from the Save As dialog box of App1, users can run executable applications other than App1 on the session hosts.
You need to ensure that the users can run only published applications on the session hosts.
What should you do?
You have two Azure subscriptions that are linked to an Azure Active Directory (Azure AD) tenant named contoso.com and contain an Azure Virtual Desktop deployment. The tenant contains a user named User1.
When User1 signs in to Azure Security Center, the user receives the message shown in the following exhibit.
You need to ensure that User1 can manage security information for the tenant. The solution must use the principle of least privilege.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
You have an Azure Virtual Desktop host pool named Pool1 in the East US region.
You have a storage account named storage1 that contains FSLogix profile containers. In the East US region, you have a shared image gallery named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region.
You need to implement a session host deployment solution for Pool2 that meets the following requirements:
Image1 must replicate in the South India region.
The session hosts in Pool2 must be based on Image1.
Changes to Image1 must be available in the South India and East US regions.
What should you include in the solution?
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You have a Windows Virtual Desktop host pool that contains five session hosts. The session hosts run
Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Windows Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services.
Solution: You modify the IP configuration of each session host.
Does that meet the goal?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have the following:
A Microsoft 365 E5 tenant
An on-premises Active Directory domain
A hybrid Azure Active Directory (Azure AD) tenant
An Azure Active Directory Domain Services (Azure AD DS) managed domain
An Azure Virtual Desktop deployment
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.
Solution: You configure a Group Policy Object (GPO) in the Azure AD DS managed domain.
Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.
Solution: From an Azure AD DS-joined computer, you modify the AADDC Computers GPO settings.
Does that meet the goal?
You have a Windows Virtual Desktop host pool that contains two session hosts. The Microsoft Teams client is installed on each session host.
You discover that only the Microsoft Teams chat and collaboration features work. The calling and meeting features are disabled.
You need to ensure that users can set the calling and meeting features from within Microsoft Teams.
What should you do?
Your network contains an on-premises Active Directory domain named contoso.com that syncs to an Azure Active Directory (Azure AD) tenant You have an Azure Virtual Desktop host pool named Pool1 that has the following settings:
• Host pool name- Pool 1
• Host pool type: Personal
• Number of VMs: 3
The session hosts have the following configurations:
• Image used to create the virtual machines: Windows 10 Enterprise
• Virtual machines domain-Joined to: On-premises conroso.com domain
You need to ensure that you can use Microsoft EndPoint Manager to manage security updates on the session hosts. What should you do?
-
You have an Azure Virtual Desktop host pool named HostPool1 that must support 60 sessions.
The session hosts for HostPool1 are configured as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have the following:
A Microsoft 365 E5 tenant
An on-premises Active Directory domain
A hybrid Azure Active Directory (Azure AD) tenant
An Azure Active Directory Domain Services (Azure AD DS) managed domain
An Azure Virtual Desktop deployment
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.
Solution: You create and configure a Group Policy Object (GPO) in the on-premises domain.
Does this meet the goal?
You have an Azure Virtual Desktop Deployment that contains a workspace named Workspace1 and a user named User1. Workspace1 contains a Desktop application group named Pool1Desktop.
At 09:00, you create a conditional access policy that has the following settings:
Assignments:
- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop
- Conditions: 0 conditions selected
Access controls
- Grant: Grant access, Require multi-factor authentication
- Sessions: Sign-in frequency 1 hour
User1 performs the actions shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
You have an Azure Virtual Desktop deployment and the users shown in the following table.
All the users plan to use a web browser to access Azure Virtual Desktop resources.
Which users can connect to Azure Virtual Desktop by using their preferred browser?
-
You plan to deploy two Azure file shares named Share1 and Share2 that will be used with Azure Virtual Desktop. Share1 will contain at least 100 GB of data and must be stored on SSDs. Share2 must be able to switch between Transaction optimized and Cool storage tiers and must be stored on HDDs.
You need to recommend which type of storage accounts to use for the shares. The solution must minimize costs.
What should you recommend for each share? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Your company has a main office and two branch offices. Each office connects directly to the internet. The router in each branch office is configured as an endpoint for the following VPNs:
A VPN connection to the main office
A site-to-site VPN to Azure
The routers in each branch office have the Quality of Service (QoS) rules shown in the following table.
Users in the branch office report slow responses and connection errors when they attempt to connect to Windows Virtual Desktop resources.
You need to modify the QoS rules on the branch office routers to improve Windows Virtual Desktop performance.
For which rule should you increase the bandwidth allocation?
You plan to deploy Azure Virtual Desktop.
You are deploying Storage Spaces Direct to a cluster that will store FSLogix profile containers. The cluster will NOT use Cloud witness.
What is the minimum number of virtual machines required for the cluster?
Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You need to implement network security to meet the security requirements and the performance requirements.
Which two actions should you perform? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
You need to recommend a DNS infrastructure that meet the performance requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You need to deploy the session hosts to meet the deployment requirements Which PowerShell cmdlel should you run first?
You need to ensure that you can implement user profile shares for the Boston office users. The solution must meet the user profile requirements.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You need to configure the user settings of Admin1 to meet the user profile requirements.
What should you do?
You need to recommend an authentication solution that meets the performance requirements.
Which two actions should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements.
What should you do?
You need to modify the custom virtual machine images to meet the deployment requirements.
What should you install?
You need to configure a conditional access policy to meet the authentication requirements.
What should you include in the policy configuration? To answer, select the appropriate options in the answer area.
NOTE Each correct selection is worth one point.
You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements.
What should you use?
You are planning the deployment of Pool4.
What will be the maximum number of users that can connect to Pool4, and how many session hosts are needed to support five concurrent user sessions? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You need to configure the device redirection settings. The solution must meet the technical requirements.
Where should you configure the settings?
Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Which users can create Pool4, and which users can join session hosts to the domain? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You plan to implement the FSLogix profile containers for the Seattle office.
Which storage account should you use?
You need to evaluate the RDS deployment in the Seattle office. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
TESTED 21 Nov 2024
